Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9721a2b0-73bd-3612-b051-3fefdae4d925.roa
File:                     9721a2b0-73bd-3612-b051-3fefdae4d925.roa (raw, json)
Hash identifier:          YSc8isk37PNyEPRv2s3yLbTfq1T3jnyY2V9d4YWTmlg=
Subject key identifier:   FE:04:8D:CE:44:F9:21:CE:AB:A3:13:8A:1D:93:1A:8B:5D:1F:4C:FA
Certificate issuer:       /CN=9de5b47f-bd49-4614-b658-9980cfd17769
Certificate serial:       010D0C9F4328584B2331864328283E990D70BD58
Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9721a2b0-73bd-3612-b051-3fefdae4d925.roa
Signing time:             Tue 09 Sep 2025 13:00:41 +0000
ROA not before:           Tue 09 Sep 2025 13:00:41 +0000
ROA not after:            Mon 08 Dec 2025 14:00:41 +0000
asID:                     19637
IP address blocks:        192.19.66.0/24 maxlen: 24
                          192.19.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:23:31:86:43:28:28:3e:99:0d:70:bd:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769
        Validity
            Not Before: Sep  9 13:00:41 2025 GMT
            Not After : Dec  8 14:00:41 2025 GMT
        Subject: CN=082192f6-65a4-4a1a-bbc2-a605ed1948cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d2:74:5d:77:77:c7:12:53:a3:7e:bc:03:f8:
                    4b:b5:82:90:a3:4e:c1:a4:28:65:5c:8d:69:de:bc:
                    3b:7a:0d:cd:bc:38:9f:41:6c:6b:5e:3b:14:8c:8a:
                    bc:37:26:a2:f8:d5:98:cb:8d:4c:92:3b:25:80:7a:
                    82:0b:0d:9f:5e:dc:3e:e7:3b:bd:ce:e5:08:c5:53:
                    d4:86:c1:2a:9a:d6:53:a6:c2:d5:de:ed:57:6e:82:
                    e1:42:b7:cf:c4:d7:26:3e:56:85:ba:35:e0:71:6a:
                    8f:4c:cd:2d:c1:68:30:27:2e:d7:85:81:64:fa:e7:
                    e6:ed:87:15:90:45:17:05:30:da:73:f0:d6:9d:2b:
                    ca:73:49:46:2f:ad:97:07:40:cb:39:a9:72:d2:9c:
                    a3:d7:4b:9b:e5:80:72:bc:96:65:20:9c:e3:79:42:
                    73:45:f9:5f:b4:12:fd:ab:00:d5:05:60:61:36:4d:
                    9d:22:3e:7b:0d:49:52:aa:77:0d:b7:1f:d2:c7:c9:
                    e5:53:50:bf:e1:98:9e:33:db:1b:cb:f3:e8:92:20:
                    59:8e:96:7b:80:38:8d:17:d5:47:02:f4:67:be:e9:
                    e7:da:0d:d6:cd:e6:4a:b6:9f:cf:c8:5e:ba:fc:6c:
                    b2:80:88:08:df:8f:79:91:41:42:a5:0f:fc:99:98:
                    53:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:04:8D:CE:44:F9:21:CE:AB:A3:13:8A:1D:93:1A:8B:5D:1F:4C:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9721a2b0-73bd-3612-b051-3fefdae4d925.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl

            X509v3 Authority Key Identifier:
                keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.19.66.0/24
                  192.19.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:83:64:47:b2:1e:a4:eb:6d:c9:a4:fa:f3:91:b1:d9:30:cd:
         0d:0b:c0:93:84:75:4e:2d:e8:19:39:e2:97:27:92:fb:9b:f2:
         f7:0d:eb:9e:55:9a:b6:1a:7d:ad:b7:e7:f1:8c:fe:0e:39:2f:
         06:ee:ba:3b:0c:d1:4c:40:a7:8f:cc:90:62:f8:6b:0b:c5:c1:
         af:88:bd:7f:dc:ad:34:e5:49:11:57:21:b5:00:9d:64:59:76:
         e7:a8:47:31:30:30:82:d1:83:68:87:73:3b:66:44:8e:98:a9:
         f2:a1:05:7f:43:1f:ee:3b:d9:a3:1c:5b:c2:39:28:7a:e7:df:
         34:1c:df:1f:3c:b5:73:ea:f3:a3:2f:3a:c0:c7:57:89:db:6a:
         36:e9:b6:5a:4f:4f:65:e7:65:ce:df:8c:be:ca:e7:09:73:32:
         b0:6f:db:af:fa:dc:07:de:fe:26:c4:d3:11:59:54:0b:83:08:
         06:27:b3:70:b6:fe:07:72:88:da:01:25:bb:03:1c:97:31:09:
         bd:fb:5d:60:80:b4:9e:b6:e2:84:f1:be:be:86:9e:f4:f8:f4:
         36:a9:67:41:aa:8a:bb:26:53:61:71:9c:bc:01:59:17:7b:e5:
         b2:a1:40:bb:84:63:7c:5e:87:23:2a:cc:c8:10:07:13:aa:b3:
         84:53:76:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:40:50 2025 by rpki-client